Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/990039a1-5535-301e-871e-21f5d0c05fb4.roa
File:                     990039a1-5535-301e-871e-21f5d0c05fb4.roa (raw, json)
Hash identifier:          t6QaHfdmoeT6K0Z21loOpA/MLPBZF0XAG1YTQxYTAeY=
Subject key identifier:   2E:25:48:70:75:CB:AA:9C:44:10:03:55:D5:7F:FD:3E:1A:DE:90:16
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       010D0C9F4328576D51CC73C042CFC1735C571AF2
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/990039a1-5535-301e-871e-21f5d0c05fb4.roa
Signing time:             Fri 17 Jul 2020 10:34:39 +0000
ROA not before:           Fri 17 Jul 2020 04:00:00 +0000
ROA not after:            Wed 12 Jul 2023 04:00:00 +0000
asID:                     29016
IP address blocks:        159.182.94.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:5c:57:1a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jul 17 04:00:00 2020 GMT
            Not After : Jul 12 04:00:00 2023 GMT
        Subject: CN=1cf97328-1878-4d38-a38f-635104d97599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9d:b2:8e:c7:91:68:d3:7a:4b:0e:be:75:45:
                    da:94:b6:ac:f1:d6:aa:06:96:f2:fa:05:e8:a2:76:
                    47:81:eb:3c:19:a4:8c:0a:f5:db:ea:ac:f0:de:cc:
                    3f:b4:61:9d:b4:70:9d:ed:0e:50:53:ff:9c:0b:1c:
                    e5:a8:55:20:7a:9a:3b:1a:05:f4:bf:c7:44:db:94:
                    76:5c:85:94:87:c5:4f:1b:d8:55:b3:47:e8:e9:0d:
                    33:c6:b9:39:9a:b6:05:ba:dc:f9:72:bb:e5:16:0a:
                    54:7d:4e:95:48:21:68:76:1d:6f:42:19:cc:57:e0:
                    ad:38:00:bf:93:88:c7:a2:da:60:31:ad:00:40:6f:
                    4e:44:89:4f:ea:30:02:b7:07:42:34:57:64:5b:13:
                    04:18:3e:03:ed:84:bf:af:e4:fe:31:30:19:5f:9b:
                    6d:d1:a5:f6:9b:39:12:3a:cf:72:e9:d8:85:25:0c:
                    3a:0d:c7:95:9e:f1:2d:44:2a:4e:ec:ee:f8:42:1d:
                    4d:3e:6d:72:4a:82:77:2e:69:85:63:6a:0f:59:ed:
                    8b:a9:7d:dd:4d:98:93:3f:40:07:fa:82:4c:0a:33:
                    df:2e:81:35:dd:f4:de:51:23:da:bb:fb:ac:78:68:
                    27:92:85:11:c9:38:fe:49:7a:b7:80:dd:c9:db:01:
                    15:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:25:48:70:75:CB:AA:9C:44:10:03:55:D5:7F:FD:3E:1A:DE:90:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/990039a1-5535-301e-871e-21f5d0c05fb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:f4:03:56:34:1f:c5:94:5f:ea:22:6d:e6:2c:fe:8d:13:11:
         1d:f3:a8:b1:31:7f:bb:f2:98:1a:c6:22:76:ed:ae:b2:b0:8f:
         ad:30:ee:b7:3e:fd:45:33:38:3a:3d:ea:a1:28:48:83:6e:85:
         14:ec:45:38:35:5a:1f:73:78:8d:e9:52:3c:2d:d2:62:61:c2:
         68:61:15:77:e8:ce:62:23:ff:78:15:a7:86:0f:9b:21:a4:7e:
         84:4e:f3:c7:41:67:80:79:09:e9:7d:3e:2b:c7:99:52:7a:98:
         7c:6f:f9:d3:0d:00:ba:01:40:e8:23:41:02:94:23:44:be:aa:
         de:16:35:9d:3a:10:73:27:18:02:75:40:98:58:03:d2:8b:17:
         e1:58:f8:5a:6c:27:10:93:96:0d:dc:70:80:e3:7c:28:27:74:
         6f:48:94:90:12:d0:c3:10:df:c5:e1:4e:ee:22:26:87:8d:fd:
         7b:74:81:39:06:d7:44:12:50:2e:b6:2e:49:a4:fb:07:ec:00:
         b2:5f:0a:62:b1:aa:9b:5d:0a:12:4f:4a:20:47:4c:f8:24:eb:
         df:ea:d7:87:8b:e4:94:01:61:8b:fb:d4:6b:96:c0:d8:ef:ef:
         38:bc:f7:37:25:27:cb:95:4c:40:c6:e5:44:52:48:7b:34:7f:
         9b:c2:76:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----